Data Protection

Client data is treated as confidential by default and handled only for the purpose it was shared.

  • Encryption in transit (TLS) and at rest
  • Client data is never used to train shared or third-party models
  • Data is processed only to deliver the agreed product or service
  • Retention periods agreed per engagement; deletion on request

Infrastructure & Hosting

Systems run on established cloud providers with security controls managed at every layer.

  • Hosting on reputable cloud infrastructure
  • Environment separation for development, testing, and production
  • Regular backups and recovery procedures
  • Monitoring, logging, and alerting on production systems

Access Control

Access to client systems and data is limited to the people who need it, for as long as they need it.

  • Least-privilege, role-based access
  • Multi-factor authentication on internal systems
  • Access granted per project and reviewed regularly
  • Access removed promptly when no longer required

Responsible AI

AI systems are designed to support people, with clear boundaries around automated decisions.

  • Human review built into high-stakes workflows
  • Outputs traceable to their source documents where possible
  • Evaluation and testing before deployment
  • Clear communication of what a system can and cannot do

Secure Development

Security is considered from design through deployment, not added at the end.

  • Code review before changes reach production
  • Dependency and vulnerability monitoring
  • Secrets kept out of source code and managed securely
  • Testing in isolated environments before release

Confidentiality & Deployment Options

We adapt to the security and compliance requirements of each organization we work with.

  • Non-disclosure agreements available before any data is shared
  • Deployment options to fit your security requirements, including your own environment where needed
  • Support for security questionnaires and vendor reviews
  • Practices aligned with applicable data-protection law, including the Digital Personal Data Protection Act, 2023 (India)

Have a security question?

Need a security questionnaire filled in, or an NDA before sharing data? Get in touch.

Contact Us